Cross-Site Scripting (XSS)
A web vulnerability that lets attackers inject malicious scripts into pages viewed by other users.
·1 min read
Cross-site scripting (XSS) is a web application vulnerability↗ that allows an attacker to inject malicious JavaScript into a page that other users then view, letting the attacker steal session cookies, hijack accounts, or deface content, all running in the victim's own browser under the site's trust.
XSS typically arises when a website displays user-supplied input without properly sanitizing it first. It remains one of the most common web vulnerabilities, which is why input validation and output encoding are standard secure-coding practices.